CVE-2026-76707: Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
HPE Networking EdgeConnect SD-WAN Gateways are affected. Exploitation requires an attacker to be adjacent to the target network; the provided information does not indicate that it is exploitable from arbitrary remote Internet locations.
Does an attacker need credentials or user interaction?
No. The stated vector requires no privileges and no user interaction, so an unauthenticated adjacent attacker can attempt to obtain some system memory contents.
What could an attacker learn from successful exploitation?
Successful exploitation may reveal some system memory contents, including information that provides insight into internal services and workflows. The disclosure may increase the likelihood of unauthorized access or privilege elevation when combined with other vulnerabilities.